N10-008 practice questions 331–340

1. Question 331 · 871 in bank

   Which of the following documents is MOST likely to be associated with identifying and documenting critical applications?

   • ASoftware development life-cycle policy
   • BUser acceptance testing plan
   • CChange management policy
   • DBusiness continuity plan

   Show answer

   Answer: D

   Explanation

   The document MOST likely to be associated with identifying and documenting critical applications is: D. Business continuity plan A business continuity plan typically includes information about critical applications, their dependencies, and the procedures for ensuring their availability in the event of disruptions or disasters. Identifying and documenting critical applications is a crucial aspect of business continuity planning to ensure that essential business functions can continue in various scenarios, such as natural disasters, equipment failures, or other emergencies.

   Source: Adapted from community discussion — salah112

   Next question

2. Question 332 · 871 in bank

   A security vendor needs to add a note to the DNS to validate the ownership of a company domain before services begin. Which of the following records did the security company MOST likely ask the company to configure?

   • ATXT
   • BAAAA
   • CCNAME
   • DSRV

   Show answer

   Answer: A

   Explanation

   The security company likely asked the company to configure a TXT (Text) record in their DNS. TXT records are used to store text information in DNS records. They are versatile and can contain various types of information, including verification tokens, ownership validation details, SPF (Sender Policy Framework) information for email authentication, and more. In this case, the security vendor might require the company to add a specific TXT record to the DNS to confirm domain ownership as part of the verification process before providing their services. While AAAA records (Option B) are used for IPv6 addresses, CNAME records (Option C) are used for creating aliases or canonical names, and SRV records (Option D) are used to specify information about available services on a network, they are not typically utilized for ownership validation purposes like TXT records are.

   Source: Adapted from community discussion — IckyNicky

   Next question

3. Question 333 · 871 in bank

   Wireless users are reporting intermittent internet connectivity. Connectivity is restored when the users disconnect and reconnect, utilizing the web authentication process each time. The network administrator can see the devices connected to the APs at all times. Which of the following steps will MOST likely determine the cause of the issue?

   • AVerify the session time-out configuration on the captive portal settings
   • BCheck for encryption protocol mismatch on the client's wireless settings
   • CConfirm that a valid passphrase is being used during the web authentication
   • DInvestigate for a client's disassociation caused by an evil twin AP

   Show answer

   Answer: A

   Explanation

   A: makes the most sense. Clearly the answer is A B. Encryption protocol, being mismatched I don't think would connect at all. Especially given that the access points are connected at all times. C. They have been able to reconnect before being disconnected so they are getting through authentication. D. The web administrator sees that they are connected, indicating it's not an evil twin but an issue on the network. This is definitely an easier question, just read it, and look at what makes the most sense. Dedony says it best, web authentication is linked to captive portals.

   Source: Adapted from community discussion — onikafei

   Next question

4. Question 334 · 871 in bank

   Within the realm of network security, Zero Trust:

   • Aprevents attackers from moving laterally through a system.
   • Ballows a server to communicate with outside networks without a firewall.
   • Cblock malicious software that is too new to be found in virus definitions.
   • Dstops infected files from being downloaded via websites.

   Show answer

   Answer: A

   Explanation

   Zero Trust is a relatively new security model that many corporations are starting to use. As the name indicates, this model seeks to reduce or eliminate security breaches for an organization by trusting absolutely nothing by default. In fact, the credo of this approach is “never trust; always verify.” Zero Trust was created by John Kindervag of Forrester Research. He realized that traditional security models operate on the silly assumption that everything inside an organization’s network should be trusted. With models based on this assumption, once a network attacker has gained access, that user account is trusted. The Zero Trust model views trust as a vulnerability. Zero Trust is implemented using many different technologies in a network, including the following: - Segmenting the network - Preventing lateral movement - Providing Layer 7 threat prevention - Simplifying granular user access control

   Source: Adapted from community discussion — Pongsathorn

   References

   • comptia.org documentation

   Next question

5. Question 335 · 871 in bank

   A help desk engineer needs to configure two servers to have the same public IP addresses. Which of the following technologies should the engineer use?

   • ANAT
   • BVIP
   • CDNS caching
   • DRFC 1918
   • ESDWAN

   Show answer

   Answer: B

   Explanation

   In the context of the question, where two servers need to have the same public IP address, NAT (Network Address Translation) would not be the best fit. NAT is typically used to map multiple private IP addresses to a single public IP address (or a few public IP addresses) for internet access, but it doesn't inherently provide a mechanism for two servers to share the same public IP address in a way that allows them to be individually addressable from the outside. On the other hand, a Virtual IP (VIP) address, often used in conjunction with load balancers, allows multiple servers to appear as if they are a single entity with one public IP address. Incoming traffic to the VIP is then distributed to the backend servers based on load balancing rules. This setup is more aligned with the requirement of having two servers share the same public IP address while still being able to individually handle requests.

   Source: Adapted from community discussion — Hundo_954

   Next question

6. Question 336 · 871 in bank

   A switch is connected to another switch. Incompatible hardware causes a surge in traffic on both switches. Which of the following configurations will cause traffic to pause, allowing the switches to drain buffers?

   • ASpeed
   • BFlow control
   • C802.1Q
   • DDuplex

   Show answer

   Answer: B

   Explanation

   Comptia book...IEEE 802.3x flow control allows a server to instruct the switch to pause traffic temporarily to avoid overwhelming its buffer and causing it to drop frames.

   Source: Adapted from community discussion — Scott12531

   Next question

7. Question 337 · 871 in bank

   A network administrator is investigating a performance issue on a dual-link connection — VPN and MPLS — to a partner network. The MPLS is the primary path, and the VPN is used as a backup. While communicating, the delay is measured at 18ms, which is higher than the 6ms expected when the MPLS link is operational but lower than the 30ms expected for the VPN connection. Which of the following will MOST likely point to the root cause of the issue?

   • AChecking the routing tables on both sides to ensure there is no asymmetric routing
   • BChecking on the partner network for a missing route pointing to the VPN connection
   • CRunning iPerf on both sides to confirm the delay that is measured is accurate
   • DChecking for an incorrect VLAN assignment affecting the MPLS traffic

   Show answer

   Answer: A

   Explanation

   Given the scenario described, the action that will MOST likely point to the root cause of the issue is: A. Checking the routing tables on both sides to ensure there is no asymmetric routing Asymmetric routing occurs when the forward and reverse paths of the network traffic take different routes. This can lead to varying delays and performance issues. In this case, the measured delay of 18ms is higher than the expected 6ms for the MPLS link but lower than the expected 30ms for the VPN connection. Checking the routing tables on both sides will help identify whether the traffic is taking the expected path in both directions. While options B, C, and D are valid troubleshooting steps, checking for asymmetric routing is particularly relevant to the described scenario and can help pinpoint the root cause of the performance issue.

   Source: Adapted from community discussion — salah112

   Next question

8. Question 338 · 871 in bank

   Which of the following is a requirement when certifying a network cabling as Cat 7?

   • AEnsure the patch panel is certified for the same category.
   • BLimit 10Gb transmissions to 180ft (55m).
   • CUse F-type connectors on the network terminations.
   • DEnsure the termination standard is TIA/EIA-568-A.

   Show answer

   Answer: A

   Explanation

   I think this is A. Cat7 uses it's own termination not 568-a It can extend to 100m at 10Gbps and just no on the f-type connector

   Source: Adapted from community discussion — ghosting

   Next question

9. Question 339 · 871 in bank

   Which of the following architectures is used for FTP?

   • AClient-server
   • BService-oriented
   • CConnection-oriented
   • DData-centric

   Show answer

   Answer: A

   Explanation

   The architecture used for FTP (File Transfer Protocol) is: A. Client-server FTP follows a client-server architecture, where there is a client that initiates requests for files or file operations, and there is a server that responds to these requests and manages the file transfers. The client and server communicate over the FTP protocol to facilitate the exchange of files between them.

   Source: Adapted from community discussion — salah112

   Next question

10. Question 340 · 871 in bank

    Which of the following bandwidth management techniques uses butters at the client side to prevent TCP retransmissions from occurring when the ISP starts to drop packets of specific types that exceed the agreed traffic rate?

    • ATraffic shaping
    • BTraffic policing
    • CTraffic marking
    • DTraffic prioritization

    Show answer

    Answer: A

    Explanation

    The bandwidth management technique that uses buffers at the client side to prevent TCP retransmissions when the ISP starts to drop packets exceeding the agreed traffic rate is: A. Traffic shaping Traffic shaping is a bandwidth management technique that involves controlling the rate of traffic sent or received on a network. It uses buffers to smooth the traffic flow and prevent packet loss. In the context described, when the ISP starts to drop packets exceeding the agreed-upon traffic rate, traffic shaping at the client side helps manage the flow of traffic and avoid TCP retransmissions by buffering the data. This allows for a more controlled and efficient use of the available bandwidth.

    Source: Adapted from community discussion — salah112

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-008 practice, question 331. 871 questions available.